$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/4c649115-742b-32bc-aa17-aa4f55ec3133.roa File: 4c649115-742b-32bc-aa17-aa4f55ec3133.roa (raw, json) Hash identifier: RQnI+5S4fPW1nA25ebBlM4opr9khSgDfNfrzYVpKLwk= Subject key identifier: 33:B2:04:D6:DE:39:6B:94:4F:4A:90:91:F7:78:78:A3:51:F6:FB:22 Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584AA23785C951D55F7AE9420400 Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/4c649115-742b-32bc-aa17-aa4f55ec3133.roa Signing time: Fri 25 Jul 2025 08:13:35 +0000 ROA not before: Fri 25 Jul 2025 08:13:35 +0000 ROA not after: Thu 23 Oct 2025 08:13:35 +0000 asID: 22641 IP address blocks: 216.169.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a2:37:85:c9:51:d5:5f:7a:e9:42:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Jul 25 08:13:35 2025 GMT Not After : Oct 23 08:13:35 2025 GMT Subject: CN=a526a008-0776-45e7-a3e6-16c184a2212b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:bb:a9:de:1e:19:e1:28:ad:66:e4:2c:67: a2:3e:e7:c2:f3:d5:19:77:72:0c:a7:67:e7:5d:81: 6b:3a:b4:8a:09:fb:9d:60:fb:5d:42:b9:61:11:57: 9d:55:f2:f7:8b:20:cd:ac:2c:a9:ab:f7:4c:b2:d1: 43:52:c4:16:bb:d6:12:2f:bc:8f:5b:95:c1:1b:08: 59:24:f2:5e:21:04:dc:97:65:bf:81:0f:0a:c3:c6: 10:43:f2:c8:17:c8:2a:32:3a:43:34:a1:72:64:e1: 9d:09:d6:29:f5:02:cc:d6:18:9a:21:49:c4:ec:47: f3:e4:77:e5:a7:80:57:44:07:e5:28:58:d5:d1:18: 9c:f7:04:90:86:ee:b8:56:20:6d:96:25:71:2b:68: 33:75:8d:0f:06:67:d2:74:2b:6c:10:e9:a7:b2:ae: 02:e2:15:b0:c5:6c:46:47:5d:f6:c0:9f:33:0f:c8: 50:e1:47:cd:0c:36:07:59:2e:8c:c9:e4:09:c6:cc: bf:54:f2:72:a1:2d:1d:e8:e3:09:80:44:48:0f:fa: a7:8c:7e:a7:ba:80:f2:af:c5:2e:73:ef:d3:1b:bb: 75:29:11:88:55:05:48:41:58:8e:b7:ad:a0:c9:a0: a1:9f:a6:0c:3a:b6:26:ef:de:12:7c:11:00:5b:fb: 50:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B2:04:D6:DE:39:6B:94:4F:4A:90:91:F7:78:78:A3:51:F6:FB:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/4c649115-742b-32bc-aa17-aa4f55ec3133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: 216.169.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d8:32:a5:d4:5d:79:49:d9:6b:a4:d0:b0:8b:de:c7:23:bd: 12:03:83:f7:2d:55:3b:34:73:ff:dc:69:d9:49:16:aa:cc:71: ea:19:07:ed:2d:52:54:bc:a7:0a:d1:7d:28:5f:60:72:13:8a: 9d:92:72:79:38:75:9d:82:e0:2a:97:9b:6b:d7:7e:82:d3:99: b4:c9:d1:eb:63:0b:bf:03:0f:6e:67:49:8f:09:5d:a5:b4:9c: 85:85:49:7f:ef:08:fc:c0:0e:0f:fe:ae:39:49:8d:fc:40:49: 94:bd:ee:05:de:ab:1b:f0:0b:59:56:54:db:e1:5f:b6:88:6d: ad:52:b7:cc:0e:7d:8b:12:4d:ec:0d:de:2f:ad:0d:53:3a:68: 40:f6:fc:6a:62:67:32:f8:c6:e6:fd:cb:e1:42:91:e6:0b:35: f4:58:08:64:a0:c4:bd:6a:98:6f:fb:d8:49:59:12:02:d7:8d: 7b:28:dd:e3:80:d8:a8:d4:6a:85:46:66:68:14:c4:2e:6f:6d: 6f:22:16:0e:12:da:79:b1:59:a9:73:ab:98:5e:91:e3:6e:cd: b1:ef:e0:d6:d8:73:6a:8e:e4:12:7e:ea:fe:7b:21:fb:c6:ea: 8a:01:e4:3b:71:c7:ee:80:91:29:1d:7e:16:7d:e1:e6:e9:fa: ac:4c:b6:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqiN4XJUdVfeulCBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI1MDcyNTA4MTMzNVoXDTI1MTAyMzA4MTMzNVowLzEtMCsGA1UEAxMk YTUyNmEwMDgtMDc3Ni00NWU3LWEzZTYtMTZjMTg0YTIyMTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAula7qd4eGeEorWbkLGeiPufC89UZd3IMp2fn XYFrOrSKCfudYPtdQrlhEVedVfL3iyDNrCypq/dMstFDUsQWu9YSL7yPW5XBGwhZ JPJeIQTcl2W/gQ8Kw8YQQ/LIF8gqMjpDNKFyZOGdCdYp9QLM1hiaIUnE7Efz5Hfl p4BXRAflKFjV0Ric9wSQhu64ViBtliVxK2gzdY0PBmfSdCtsEOmnsq4C4hWwxWxG R132wJ8zD8hQ4UfNDDYHWS6MyeQJxsy/VPJyoS0d6OMJgERID/qnjH6nuoDyr8Uu c+/TG7t1KRGIVQVIQViOt62gyaChn6YMOrYm794SfBEAW/tQOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOyBNbeOWuUT0qQkfd4eKNR9vsiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvNGM2NDkxMTUtNzQyYi0z MmJjLWFhMTctYWE0ZjU1ZWMzMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KnSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDYMqXUXXlJ2Wuk0LCL3scjvRIDg/ctVTs0c//cadlJFqrMceoZB+0t UlS8pwrRfShfYHITip2Scnk4dZ2C4CqXm2vXfoLTmbTJ0etjC78DD25nSY8JXaW0 nIWFSX/vCPzADg/+rjlJjfxASZS97gXeqxvwC1lWVNvhX7aIba1St8wOfYsSTewN 3i+tDVM6aED2/GpiZzL4xub9y+FCkeYLNfRYCGSgxL1qmG/72ElZEgLXjXso3eOA 2KjUaoVGZmgUxC5vbW8iFg4S2nmxWalzq5hekeNuzbHv4NbYc2qO5BJ+6v57IfvG 6ooB5Dtxx+6AkSkdfhZ94ebp+qxMtuM= -----END CERTIFICATE-----Generated at Wed Aug 20 02:50:25 2025 by rpki-client